GDPR Compliance Policy

This policy explains how EasyCookingKitchen (hereafter “EasyCookingKitchen”, “we”, “our”, or “us”) collects, uses, protects, and shares personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We are committed to safeguarding your privacy and ensuring that your personal data is processed lawfully, fairly, and transparently.

Last Updated: April 03, 2026

1. Who We Are

EasyCookingKitchen is a website dedicated to providing cooking tips, recipes, and culinary inspiration. We operate from the United Kingdom and are governed by UK law. For any questions or concerns about this policy or your personal data, please contact us at [email protected].

2. What Data We Collect

Email addresses: When you subscribe to our newsletter, create an account, or contact us via the form, we collect your email address to send you updates, recipes, and promotional material.
Cookies: We use essential cookies to keep you logged in, remember your preferences, and provide a smooth browsing experience. Optional cookies are used for analytics and advertising.
Analytics data: We employ Google Analytics (and similar services) to gather anonymized data on how visitors interact with the site, which helps us improve content and user experience.

3. Legal Basis for Processing

We process personal data based on the following lawful bases:

Consent: When you voluntarily provide an email address or opt‑in to newsletters, you give explicit consent for us to use that data for communication and marketing purposes.
Legitimate Interest: We rely on legitimate interest to collect analytics data and use cookies that are essential for providing our services, improving site performance, and tailoring content to your preferences.

4. How We Protect Your Data

We employ robust technical and organisational measures to safeguard your personal data:

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS, ensuring confidentiality and integrity.
Secure Servers: Our hosting environment is protected by firewalls, intrusion detection systems, and regular security audits.
Limited Retention: Personal data is retained only as long as necessary to fulfil its purpose (e.g., email addresses are kept for the duration of the subscription or until you request deletion).
Access Controls: Only authorised staff with a legitimate need to access personal data are granted access, and all staff undergo data protection training.

5. Your GDPR Rights

Right to Access

You have the right to request a copy of any personal data we hold about you. This includes the data we collected through email subscriptions, cookies, and analytics.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct it promptly.

Right to Erasure

Also known as the “right to be forgotten”, you may request the deletion of your personal data, provided there is no lawful reason for us to retain it (e.g., legal obligations).

Right to Restrict Processing

In certain circumstances, you can request that we limit how we process your data. This may apply if you contest the accuracy of the data or if the processing is unlawful.

Right to Data Portability

You can obtain your personal data in a structured, commonly used, and machine‑readable format, allowing you to transfer it to another controller.

Right to Object

You may object to the processing of your data for direct marketing, profiling, or legitimate interest purposes. We will cease such processing unless we can demonstrate a compelling legitimate interest.

Right to Withdraw Consent

If you have given us consent to process your data, you can withdraw it at any time. Withdrawal will not affect the lawfulness of processing based on consent prior to withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us via email at [email protected]. When writing, please provide:

Your full name and contact details.
A clear statement of the request (e.g., “I request deletion of my email address”).
Any supporting evidence or identification needed for verification (e.g., a copy of your ID if you request erasure).

We will respond to your request within 30 days, as mandated by GDPR. If your request is complex or requires additional time, we will notify you of any delays and provide a reasonable extension.

7. Data Sharing and Third‑Party Services

We do not sell or rent your personal data to third parties. We share data with service providers that support our operations (e.g., email service providers, web hosting, and analytics platforms). These partners are bound by confidentiality agreements and are required to comply with GDPR. We only provide them with the minimum data necessary to perform their services.

8. Cookies and Tracking

Our website uses the following cookie categories:

Essential Cookies: Necessary for site functionality (e.g., session cookies).
Analytics Cookies: Collect anonymised data about visitor behaviour (e.g., Google Analytics).
Marketing Cookies: Used for targeted advertising and tracking across sites.

You can manage your cookie preferences through your browser settings or by using the cookie banner that appears on first visit.

9. Security Breaches

In the unlikely event of a data breach that could compromise your personal data, we will take immediate action to mitigate the risk, investigate the breach, and notify the relevant supervisory authority within 72 hours, as required by GDPR. If the breach poses a high risk to your rights and freedoms, we will also inform affected individuals directly.

10. Changes to this Policy

We reserve the right to update this policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we handle your personal data.

Contact Us

If you have any questions, concerns, or wish to lodge a complaint about how we handle your personal data, please contact us at [email protected]. Our data protection officer will respond within the statutory 30‑day period.